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CLAIMS 



1 . A method for a document store to deliver a copy of a 
document requested therefrom, the document being stored in a folder of the 
document store, the folder having rights information associated therewith, the 
method comprising: 

receiving the document into the folder; 

receiving a request for the copy of the document; 

defining rights data for the copy of the document based on the 
rights information of the folder; 

publishing the copy of the document and the defined rights 
data thereof to result in a package with the rights data and the copy of the 
document encrypted according to a content key (KD) to result in (KD(copy)); and 

delivering the formed package to the requester, whereby the 
rights data can be discovered upon the requester attempting to render the 
package and such discovery triggers a request for a corresponding license based 
on such rights data, the license including (KD) therein in a form available to the 
requester to decrypt (KD(copy)) if the requester satisfies the rights data. 

2. The method of claim 1 further comprising obtaining the 
license on behalf of the requester and delivering the obtained license to the 
requester with the package. 

3. The method of claim 1 wherein publishing comprises 
generating the content key (KD); 

encrypting the copy of the document with (KD) to form 

(KD(copy)); 

protecting (KD(copy)) to a rights management (RM) server by 
encrypting (KD) with a public key of the RM server (PU-RM) to result in (PU- 
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RM(KD)), whereby only the RM server with a corresponding private key (PR-RM) 
can apply same to (PU-RM(KD)) to reveal (KD); and 

attaching the rights data with (PU-RM(KD)) therein to 
(KD(copy)) to form the package. 

4. The method of claim 3 further comprising having the defined 
rights data signed by one of the RM server or the document store. 

5. The method of claim 3 comprising concatenating the rights 
data with (PU-RM(KD)) therein to (KD(copy)) to form the package. 

6. The method of claim 1 wherein the folder has rights 
information comprising access controls associated therewith, the access controls 
being defined for each individual and/or for each group of individuals that may 
access the folder, and wherein defining the rights data comprises mapping the 
access controls for the folder into the rights data for the copy of the document. 

7. The method of claim 6 wherein defining the rights data 
comprises mapping the access controls for the folder into the rights data for the 
requester and also for all other individuals or groups of individuals specified in the 
access controls, whereby the copy of the document with the rights data attached 
thereto can be distributed and redistributed to such other individuals and each 
such other individual can employ the rights data to obtain a license to render the 
document. 

8. The method of claim 1 wherein the folder has rights 
information comprising a rights template associated therewith, the rights template 
defining rights for a number of individuals and/or groups of individuals, and 
wherein defining the rights data comprises copying at least a portion of the rights 
template into the rights data for the copy of the document. 
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9. The method of claim 8 wherein defining the rights data 
comprises copying at least a portion of the rights template into the rights data for 
the requester and also for all other individuals or groups of individuals specified in 
the rights template, whereby the copy of the document with the rights data 
attached thereto can be distributed and redistributed to such other individuals and 
each such other individual can employ the rights data to obtain a license to render 
the document. 

10. The method of claim 8 comprising copying substantially all of 
the rights template into the rights data for the copy of the document. 

1 1 . The method of claim 8 comprising copying a portion of the 
rights template relevant to the document into the rights data for the copy of the 
document. 

12. The method of claim 1 comprising receiving the document 
into the folder in a non-RM-protected form, whereby RM-protection is applied to 
the copy of the document when the copy of the document is delivered to the 
requester. 

13. A computer-readable medium having stored thereon 
computer-executable instructions for performing a method for a document store to 
deliver a copy of a document requested therefrom, the document being stored in a 
folder of the document store, the folder having rights information associated 
therewith, the method comprising: 

receiving the document into the folder; 

receiving a request for the copy of the document; 

defining rights data for the copy of the document based on the 
rights information of the folder; 

publishing the copy of the document and the defined rights 
data thereof to result in a package with the rights data and the copy of the 
document encrypted according to a content key (KD) to result in (KD(copy)); and 
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delivering the formed package to the requester, whereby the 
rights data can be discovered upon the requester attempting to render the 
package and such discovery triggers a request for a corresponding license based 
on such rights data, the license including (KD) therein in a form available to the 
requester to decrypt (KD(copy)) if the requester satisfies the rights data. 

14. The medium of claim 13 wherein the method further 
comprises obtaining the license on behalf of the requester and delivering the 
obtained license to the requester with the package. 



15. The medium of claim 13 wherein publishing comprises 
generating the content key (KD); 

encrypting the copy of the document with (KD) to form 

(KD(copy)); 

protecting (KD(copy)) to a rights management (RM) server by 
encrypting (KD) with a public key of the RM server (PU-RM) to result in (PU- 
RM(KD)), whereby only the RM server with a corresponding private key (PR-RM) 
can apply same to (PU-RM(KD)) to reveal (KD); and 

attaching the rights data with (PU-RM(KD)) therein to 
(KD(copy)) to form the package. 

16. The medium of claim 15 wherein the method further 
comprises having the defined rights data signed by one of the RM server or the 
document store. 

1 7. The medium of claim 1 5 wherein the method comprises 
concatenating the rights data with (PU-RM(KD)) therein to (KD(copy)) to form the 
package. 



1 8. The medium of claim 1 3 wherein the folder has rights 
information comprising access controls associated therewith, the access controls 
being defined for each individual and/or for each group of individuals that may 
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access the folder, and wherein defining the rights data comprises mapping the 
access controls for the folder into the rights data for the copy of the document. 

19. The medium of claim 18 wherein defining the rights data 
comprises mapping the access controls for the folder into the rights data for the 
requester and also for all other individuals or groups of individuals specified in the 
access controls, whereby the copy of the document with the rights data attached 
thereto can be distributed and redistributed to such other individuals and each 
such other individual can employ the rights data to obtain a license to render the 
document. 

20. The medium of claim 13 wherein the folder has rights 
information comprising a rights template associated therewith, the rights template 
defining rights for a number of individuals and/or groups of individuals, and 
wherein defining the rights data comprises copying at least a portion of the rights 
template into the rights data for the copy of the document. 

21 . The medium of claim 20 wherein defining the rights data 
comprises copying at least a portion of the rights template into the rights data for 
the requester and also for all other individuals or groups of individuals specified in 
the rights template, whereby the copy of the document with the rights data 
attached thereto can be distributed and redistributed to such other individuals and 
each such other individual can employ the rights data to obtain a license to render 
the document. 

22. The medium of claim 20 wherein the method comprises 
copying substantially all of the rights template into the rights data for the copy of 
the document. 

23. The medium of claim 20 wherein the method comprises 
copying a portion of the rights template relevant to the document into the rights 
data for the copy of the document. 
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24. The medium of claim 13 comprising receiving the document 
into the folder in a non-RM-protected form, whereby RM-protection is applied to 
the copy of the document when the copy of the document is delivered to the 
requester. 



